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MICHAEL STOLL 

Abstract. This is an extended version of an invited lecture I gave at the 
Journees Arithmetiques in St. Etienne in July 2009. 

We discuss the state of the art regarding the problem of finding the set of 
rational points on a (smooth projective) geometrically integral curve C over Q. 
The focus is on practical aspects of this problem in the case that the genus of C 
is at least 2, and therefore the set of rational points is finite. 



1. Introduction 

1.1. The Problem. Let C be a geometrically integral curve defined over Q. We 
stick to Q here for simplicity. In principle, we can replace Q by an arbitrary 
number field. In practice, however, many of the necessary algorithms are only 
implemented for Q, and even when they are available for more general number 
fields, the computations are usually much more involved. We consider the following 
problem. 

Problem 1. Determine C(Q), the set of rational points on C. 

We observe that a curve and its smooth projective model only differ in a com- 
putable finite set of points (coming from points at infinity and from singularities). 
Therefore we lose nothing if we assume that C is smooth and projective. 

1.2. The Structure of C(Q). Before we consider curves of 'higher genus' more 
specifically, let us recall what is known about the structure of the set C(Q) in 
general. There is a trichotomy, depending on the genus g of C, which is the most 
important geometric (or even topological, if we think of C as a Riemann surface) 
invariant of the curve. This exemplifies the belief that "Geometry determines 
arithmetic" — the structure of the set of rational points on a variety should only 
depend on its geometry. 

We have the following three cases. 
• 9 = 0: 

In this case, we either have C(Q) = (this is always possible), or else if 
there is a point P G C(Q), then C is isomorphic over Q to the projective 
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line P 1 . Any such isomorphism will give us a parameterization of C(Q) 
in terms of rational functions in one variable. Probably the best-known 
example is the unit circle x 2 + y 2 = 1, whose points can be rationally 
parameterized in the following way. 



As t runs through ¥ 1 (Q) = Q U {oo}, its image runs through all the 
rational points on the unit circle. So such a parameterization gives us a 
finite description of the set C(Q). 



We either have C(Q) = 0, or else if there is a point P £ C(Q), then 
(C, Pq) is an elliptic curve. So C has a geometrically defined structure 
as an abelian group with Pq as its origin. This implies that C(Q) is also 
an abelian group with origin Pq. Mordell [34] has shown that C(Q) is 
finitely generated. (Weil [I >] has extended this to elliptic curves and, more 
generally, Jacobian varieties over arbitrary number fields.) In particular, 
we can describe C(Q) by listing generators of this group. 



This is the case of 'higher genus'. Mordell [3 I] has conjectured, and Falt- 
ings [: i] has proved that the set C(Q) is always finite. In particular, we 
can describe C (Q) by simply listing the finitely many points. 

We see that in each case, there is a finite description of C(Q). The precise version 
of Problem 1 above therefore asks for an algorithm that provides this description. 

Before we consider the higher genus case in detail, let us give a short discussion 
of the other two cases. 

1.3. Genus Zero. If C is a smooth projective geometrically integral curve of 
genus (over any field k), then C is isomorphic to a smooth conic. If we can 
compute in k, then we can find an explicit such isomorphism. This can be done 
by computing a basis of the Riemann-Roch space of an anticanonical divisor; the 
map to P 2 given by this basis provides the desired isomorphism. 

Now let k — Q again. Like all quadrics, conies C satisfy the Hasse Principle: If 
C(Q) = 0, then C(R) = or C(Q P ) = for some prime p, where Q p is the field 
of p-adic numbers. For future reference, we make the followinf definition. 

Definition 2. The curve C has points everywhere locally, if C(R) 7^ and 
C (Q p ) 7^ for all primes p. 




The Hasse Principle then states that a curve that has points everywhere locally 
must also have rational points. 
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Let us assume that C is given by a ternary quadratic form with integral coefficients. 
Then C(Q P ) 7^ whenever p does not divide the discriminant of the quadratic form 
(we use the fact that smooth conies over finite fields always have rational points, 
plus Hensel's Lemma to lift to a p-adic point). So there are only finitely many 
primes to check in addition to C(R). (One should note, however, that in general 
one has to factor the discriminant, which can be difficult.) For each given prime, 
Hensel's Lemma gives us an upper bound for the p-adic precision needed. So the 
check whether C has points everywhere locally reduces to a finite computation. 
Therefore we can decide if C(Q) is empty or not. This is still true for a number 
field in place of Q. 

If C(Q) 7^ and we know the 'bad' primes (those dividing the discriminant), then 
there is an efficient procedure that exhibits a point P £ C(Q), see for example [44]. 
This can be seen as a 'minimization' process that finds a Q-isomorphic curve with 
good reduction at all primes, followed by a 'reduction' process based on lattice 
basis reduction [30] that brings the curve into the standard form y 2 = xz, which 
has some obvious points. This last (reduction) part of the procedure has, to my 
knowledge, not yet been generalized to arbitrary number fields in a satisfactory 
way. 

Given Pq G C(Q), we can easily compute an isomorphism <p : C — > P 1 by projecting 
away from Pq. The inverse of </> then provides us with the desired parameterization 
ofC(Q). 

1.4. Genus One. For curves of positive genus, the Hasse Principle no longer 
holds in general. So there is no easy way to check if the curve has rational points 
or not. If we cannot find a rational point, but C has points everywhere locally, 
then we can try to use a descent computation. For n > 2, n-descent consists in 
computing a finite number of n-coverings of C such that each of these n-coverings 
has points everywhere locally and every rational point on C is the image of a 
rational point on one of the n-coverings. An n-covering is a morphism 7r : D — > C 
of curves over Q that over Q is isomorphic to the multiplication- by-n map E —¥ E, 
where E is C/Q considered as an elliptic curve. In principle, this computation is 
possible for every C and every n over every number field. In practice however, 
this is feasible only in a few cases. 

• y 2 — quartic in x and n = 2 [11, 33]; 

• intersections of two quadrics in P 3 and n = 2 [45]; 

• plane cubics and n = 3 (this is a current PhD project). 

If the finite set of relevant n-coverings turns out to be empty, this proves that 
C(Q) = 0. If we assume that Shafarevich-Tate groups of elliptic curves do not 
contain nontrivial infinitely divisible elements (this assumption is weaker than the 
standard conjecture that UI(E/Q) is finite), then it follows that if C(Q) = 0, then 
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there must be an n such that there are no n-coverings of C with points everywhere 
locally. This means that we can, at least in principle, verify that C does not have 
rational points. 

On the other hand, if C does have rational points, then their preimages on suitable 
n-coverings tend to be 'smaller' and can therefore be found more easily by a search. 
So n-descent on C serves two purposes: it allows us to show that no rational points 
exist, but it can also help us find a rational point. 

It should be noted that if a curve of genus 1 has infinitely many rational points, 
the smallest point can be exponentially large in terms of the coefficients of the 
defining equations. (This comes from the corresponding property of generators of 
the group of rational points on an elliptic curve.) This phenomenon is what can 
make life rather hard when we try to find the rational points on a curve of genus 1. 

1.5. Elliptic Curves. We now assume that we have found a rational point Pq on 
our curve C of genus 1. Then, as mentioned above, (C, Pq) is an elliptic curve, 
which we will denote E. By Mordell's Theorem we know that E(Q) is a finitely 
generated abelian group; our task is now to find explicit generators of this group. 
By the structure theorem for finitely generated abelian groups, we have 

E(Q)=E(Q) tors ®Z r , 

where E(Q) toIS is the finite subgroup of E(Q) consisting of all elements of finite 
order. This finite subgroup is easy to find. The hard part is to determine the 
rank r = rank.E'(Q). 

We can use n-descent again. When we apply it to an elliptic curve, the set of 
n-coverings with points everywhere locally has a natural group structure; this 
group is the n-Selmer group of E. Its order gives an upper bound for the size of 
E(Q)/nE(Q), from which we can deduce an upper bound for r. As before, this 
computation is always possible in principle (see [49]). In practice, n-descent on an 
elliptic curve over Q is currently feasible for n = 2, 3, 4, 8; the case n = 9 is current 
work. See [16, 17] for a detailed description. In some cases, we can use what is 
known about the conjecture of Birch and Swinnerton-Dyer. If the conductor of E 
is not too large, we can compute the values of the L-series of E and its derivatives 
at s — 1 to sufficient precision. If L(E, 1) ^ 0, then r = 0, and if L'(E, 1) ^ 0, 
then r = 1 [29]. 

A search for independent points in E(Q) gives a lower bound on r. However, 
generators may be very large. In the same way as for general curves of genus 1, 
descent can help us to find them. When r = 1, Heegner points can be used if the 
conductor of E is sufficiently small. 

Example 3. (See [17].) The group E(Q), where 

E : y 2 = x 3 + 7823 , 



RATIONAL POINTS ON CURVES 

is infinite cyclic and generated by the point 

_ /2263582143321421502100209233517777 
~ V 11981673410095561 2 ' 

186398152584623305624837551485596770028144776655756 
11981673410095561 3 

This point was found by a 4-descent on E. The Heegner point method is not 
feasible here, because the conductor of E is 2 4 • 3 3 • 7823 2 , which is a bit too large. 

A discussion of how one can try to find the set of rational points on an elliptic 
curve, or more generally, on a genus 1 curve, would provide enough material for at 
least one book. But this is a different story and will be told at another occasion. 

2. Checking Existence of Rational Points 

We now turn to curves of higher genus, meaning g > 2. The first question we 
would like to answer is whether there are any rational points on the curve C or 
not. 

2.1. Finding Points. If C (Q) is nonempty, we can usually find a rational point by 
search. This is because (in contrast to the case of genus 1) we expect the rational 
points to be fairly small. The following is a consequence of Vojta's Conjecure; see 
Su-Ion Ill's thesis [28]. 

Conjecture 4. If C — >■ B is a family of higher-genus curves, then there are con- 
stants 7 and k such that 

H C (P) < iH B (b) K for all P G C b (Q) 

if the the fiber Cb is smooth. 

Here Hb denotes a (non-logarithmic) height on the base B, and He is a suitable 
height function on C. 

If C is hyperelliptic, one can use the ratpoints program [54] for the point search. 
Examples 5. Consider a curve 

C:y 2 = f 6 x 6 + --- + f\x + fo 

of genus 2, with fj G Z. Then the conjecture says that there are 7 and k such 
that the ^-coordinate p/q of any point P G C(Q) satisfies 

\p\,\q\ <7max{|/ |,|/ 1 |,...,|/ 6 |} K . 

In [7], we consider curves of genus 2 as above such that fj G {— 3, — 2, . . . , 3}. 
We will call these curves small genus 2 curves in this paper. If such a curve has 
rational points, then there is one whose x-coordinate is p/q with |p|, \q\ < 1519. In 
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fact, for all but two such curves (up to isomorphism), we even have \p\, \q\ < 80. 
On the other hand, the largest point known on one of these curves (which is very 
likely the largest point there is) has height 209 040, which indicates that 7 and/or k, 
cannot be too small. 

So usually we can assume that we know all the points in C(Q). In particular, if 
we are unable to find a rational point on C, it is reasonable to suspect that there 
are indeed no rational points. The problem now is to prove this fact in some way. 

2.2. Local Points. One approach that we can try is to check if C has points 
everywhere locally. As before, this can be done by a finite computation, which is 
efficient modulo the determination of the 'bad' primes. This usually comes down 
to factoring some kind of discriminant. In addition to the bad primes, one also 
has to look at small primes. The reason is that smooth curves of genus g may fail 
to have F p -points when p is small relative to g. (By the Weil bounds, we have 
#C(F P ) > p + 1 — 2g^/p, so there will be F p -points whenever p + 1 > 2g^/p.) 

Example 6. (Poonen-Stoll [38]) About 84-85% of all curves of genus 2 have points 
everywhere locally. This percentage is a density: we consider all genus 2 curves of 
the form y 2 = f(x) with / = f 6 x 6 + - ■ ■ + fiX + f G Z[x] such that max{|/.,|} < N, 
and determine the proportion of curves with points everywhere locally. Then 
limjv-5.00 01 n exists and has approximately the value given above. Convergence 
seems to be rather fast, compare the data given at the end of [8]. 

The counterpart to this result is the following conjecture. 
Conjecture 7. 0% of all curves of genus 2 have rational points. 

In fact, heuristic considerations suggest the following. Let be the proportion of 
curves of size up to iV that possess rational points (similarly to oln above). Then 
(3 N < N" 1 ' 2 . See [53] for details and some experimental data. 

This indicates that checking for points everywhere locally will usually not suffice 
to prove that C(Q) = 0: the Hasse Principle is quite likely to fail. 

Example 8. (Bruin-Stoll [7]) Among the 196171 isomorphism classes of small 
genus 2 curves, there are 29 278 that are counterexamples to the Hasse Principle. 

2.3. Descent Again. So we need another method of attack. One possibility is 
again descent. We find a covering 71 : D — > C (more precisely, an unramified 
covering of smooth projective geometrically integral curves that over Q is a Galois 
covering). As before in the genus 1 case, this covering has finitely many twists 
7T£ : — > C such that has points everywhere locally. 

Example 9. Consider a hyperelliptic curve 

C :y 2 = g(x)h(x) 
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with degg, degh not both odd. Then 

D : u 2 = g(x) , v 2 = h(x) 

is an unramified Z/2Z-covering of C with 7r : D — > C given by (x, u, v) h-> (x, uv). 
Its twists are 

-D,i : du 2 = g{x), dv 2 = h(x) , d G Q X /(Q X ) 2 . 

Every rational point on C lifts to one of the twists, since g(x) must have some 
square class d. If g and h have integral coefficients and p is a prime divisor of d 
(we assume d to be a squarefree integer), then does not have p-adic points 
unless g and h have a common root mod p. This is the case only when p divides 
the resultant of g and h. So we see that only finitely many of the twists can 
have points everywhere locally. 

The idea of descent goes back to Fermat ('descente infinie'). The statement that 
only finitely many twists are relevant is a variant of a result due to Chevalley and 
Weil [I I], see Theorem 11 below. 

Here is a concrete example. 

Example 10. Consider the genus 2 curve 

C : y 2 = -(x 2 + x - l)(x 4 + x 3 + x 2 + x + 2) =: f(x) . 

C has points everywhere locally. This can be seen by observing that 

/(0)=2, /(l) = -6, /(-2) = -3-2 2 , /(18)G(Q 2 X ) 2 and /(4) G (Q 3 X ) 2 . 

The first three values show that C(R) ^ and that C(Q P ) ^ for all p ^ 2, 3; 
the last two fill the remaining gaps. 

The relevant twists of the obvious Z/2Z-covering are among 

du 2 = -x 2 -x + l, dv 2 = x 4 + x 3 + x 2 + x + 2 

where d is one of 1, —1, 19 or —19, since the resultant of the two factors is 19. 
If d < 0, the second equation has no solution in R; if d — 1 or 19, the pair of 
equations has no solution over F3. This is because the first equation implies that 
x mod 3 is one of or — 1, whereas the second equation implies that x mod 3 is 
one of 1 or 00. 

So there are no twists with points everywhere locally, and therefore C(Q) = 0. 
The general result is as follows. 

Theorem 11 (Descent Theorem). Let 71 : D — > C be an unramified covering that 
is geometrically Galois. Its twists tt^ : — > C are parameterized by £ G H 1 (Q,G) 
(a Galois cohomology set), where G is the Galois group of the covering. We then 
have the following: 
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•C{Q)= |J 7r c (£> € (Q)). 

• Sel 7r (C) := {£ G if 1 (Q,G) : -D^ /jas points everywhere locally} 
is finite (and computable) . 

Definition 12. In the situation of the Descent Theorem, we call Sel 7r (C) the 
Selmer set of C w.r.t. n. 

Corollary 13. If we find SeV(C) = 0, then C(Q) = as well. 

This follows from the two statements in the theorem, since -Dg(Q) is empty unless 
.Dg has points everywhere locally. 

2.4. Abelian Coverings. In principle, we can use this approach with any cover- 
ing of C in the above sense. However, in practice it is easier to restrict to a special 
kind of coverings. 

Definition 14. A covering 7r : D — > C as above is abelian if its Galois group G is 
abelian. 

The reason why abelian coverings are especially useful comes from the following 
fact (which is a result of 'Geometric Class Field Theory'; see [41] for details). We 
let J denote the Jacobian variety of C. We assume for simplicity that there is an 
embedding i : C — > J. (This means that there is a divisor class of degree 1 on C 
that is defined over Q, i.e., stable under the action of the absolute Galois group 
of Q. If we can show that there is no such divisor class, then it follows that C does 
not have rational points, since a rational point would provide us with a suitanble 
divisor class.) 

Then all abelian coverings of C are obtained from n- coverings of J: 




Here X — > J is an n-covering of J, meaning that there is an isomorphism of X 
with J over Q that makes the triangle in the diagram commute, and it : D — >■ C 
is the pull-back of X — > J under i. 

We call such a covering D — > C an n-covering of C; the set of all n-coverings 
with points everywhere locally is denoted Sel^(C) and called the n-Selmer set 
of C. Every abelian covering of C can be extended to an n-covering for some n. 
Therefore the Jacobian gives us a handle on all the abelian coverings of C. The 
process of computing the set Sel^(C) is called an n-descent on C. 
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2.5. Computing n-Selmer Sets in Practice. In practice, computing Sel^(C) 
is usually quite hard, even though it is possible in principle. The most difficult 
obstacle is that the computation requires arithmetic information like ideal class 
groups and unit groups for number fields that can be rather large. About the only 
fairly general situation where the fields involved are manageable is the computation 
of the 2-Selmer group of a hyperelliptic curve C : y 2 = f(x). In this case, the 
relevant number fields are those generated by a root of each irreducible factor 
of /. This is a generalization of the y 2 = g(x)h(x) example above, where all 
possible factorizations are considered simultaneously. The paper [8] describes the 
procedure in detail. 

Example 15. (See [7, 8]) Among the small genus 2 curves, there are only 1492 
curves C without rational points and such that Sel^^C) ^ 0. So 2-descent is a 
rather efficient tool in this case. Figure 1 at the end of [8] shows that this is still 
mostly true also for larger coefficients. 

2.6. A Conjecture. In the example above, we have seen that 2-descent shows 
that most of the small curves without rational points really do not have rational 
points. This makes it plausible that perhaps we can deal with the remaining curves 
by an n-descent with a suitable n > 2. Unfortunately, the direct computation 
of the relevant Selmer sets is infeasible. Still, we can formulate the following 
conjecture. In [51], we argue that there are good reasons for it to hold. 

Conjecture 16. J/C(Q) = 0, then Sel (n) (C) = for some n > 1. 

The case n — 1 is equivalent to checking for points everywhere locally on C, since 
id<7 : C — > C is the only 1-covering of C. 

Remarks 17. 

(1) In principle, Sel^(C) is computable for every n. The conjecture therefore 
implies that "C(Q) = 0?" is decidable. (Search for points by day, compute 
Sel (n) (C) by night.) 

(2) The conjecture implies that the Brauer-Manin obstruction is the only ob- 
struction against rational points on curves. (In fact, the conjecture is 
equivalent to this statement.) See [51] for details. 

3. The Mordell-Weil Sieve 

3.1. The Idea. We now assume that we know explicit generators of the Mordell- 
Weil group J(Q), where J is, as before, the Jacobian variety of the curve C. 
By [55], J(Q) is a finitely generated abelian group. It is clear that in the dia- 
gram (1) we only need to consider those n-coverings X of J that actually have 
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rational points. These n-coverings are of the form 

J3P\ — >nP + QeJ withQeJ(Q); 

the shift Q is only determined modulo nJ(Q). 

The set we are interested in is therefore 

{Q + nJ(Q) : (Q + nJ(Q)) n t(C) ^ 0} c J(Q)/nJ(Q) . 

By the above, it contains the subset of the n-Selmer set of C that consists of 
n-coverings of C with rational points. We approximate the condition by testing it 
modulo p for a set of primes p. 

Let 5* be a finite set of primes of good reduction for C . Consider the following 
diagram. 

(2) C(Q) J(Q) J(Q)/nJ(Q) 

P 

Y Y Y 

n c(f p ) n j(f p ) — n j^a* j(f p ) 

pes pes pes 



We can compute the maps a and /3, since they only involve finite objects. If their 
images do not intersect, then it follows that C(Q) = 0. This method is known 
as the 'Mordell-Weil Sieve'. It was first used by Scharaschkin in his thesis [40]. 
Flynn [23] used it on a number of genus 2 curves. In [7], it is applied to the 
remaining undecided small genus 2 curves. 

Example 18. If C is a small genus 2 curve without rational points, then either 
C fails to have points everywhere locally, or Sel^(C) = 0, or the Birch and 
Swinnerton-Dyer Conjecture for J implies that C has no embedding into J (this 
is needed for 42 curves), or else the Mordell-Weil Sieve with suitable parameters 
S and n proves that C(Q) is empty. 

In order to obtain this result, one needs a carefully optimized implementation of 
the Mordell-Weil sieve. See [9] for details. The parameter the complexity depends 
on most sensitively is the rank r of J(Q). If r < 3, our implementation works 
quite well; it should be mentioned that it uses not only information mod p for 
good primes p, but also information modulo powers of (small) primes, even when 
they are primes of bad reduction. There are not yet enough worked examples 
where the rank is larger than 3, so it is hard to say anything precise about the 
performance of the algorithm in this case. At least there are isolated examples 
that show that it can still work when r is as large as 6. 

Poonen [35] shows that under reasonable assumptions, the following should be 
true. 
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Conjecture 19 (Poonen Heuristic). If C(Q) = 0, then the maps a and (3 in 
Diagram (2) above will have disjoint images when n and the set S are sufficiently 
large. 

Conjecture 19 implies Conjecture 16 if we assume that III(J/Q) has no nontrivial 
infinitely divisible elements, see [51]. 

3.2. Satisfying the Assumption on J(Q). We are assuming here that we know 
explicit generators of J(Q). For the Mordell-Weil sieve as described above, if we 
use it to show that C has no rational points, it is actually sufficient to know 
generators of a subgroup of finite index, if we can also show that the index is 
coprime to n. The latter is usually not so hard; see [26]. To achieve the former, 
we can use n-descent again, but this time on the Jacobian J. This is feasible for 
hyperelliptic curves when n = 2 and in a few other rather special cases, see [39, 
36, 47, 37]. As with elliptic curves, large generators can be a problem, however. 

Example 20. (See [ ].) For the small genus 2 curve 

C : y 2 = -3 x 6 + x b - 2 x 4 - 2 x 2 + 2 x + 3 , 

the Mordell-Weil group J(Q) is infinite cyclic, generated by [Pi + P2 — W], where 
the x-coordinates of Pi and P2 are the roots of 

2 1 37482925498065820078878366248457300623 , 581452628280824306698926561618393967033 
^ 34011049811816647384141492487717524243 ^ 544176796989066358146263879803480387888 ' 

and W is a canonical divisor. 

The bound on r obtained from 2-descent on J need not be tight. The difference 
to the actual value of r comes from 2-torsion elements of the Shafarevich-Tate 
group III(J/Q). In some cases, it is possible to show that there are non-trivial 
such elements, thereby improving the upper bound on the rank. Two techniques 
that have been suggested and also used are visualization [6] and the Brauer-Manin 
obstruction on certain related varieties [1, 24, 31]. 

For 'reasonable' curves of genus 2, generators of a finite-index subgroup of J(Q) 
can usually be determined. For hyperelliptic curves of genus at least 3, it may 
still be possible in many cases, but the situation is already less favorable. Beyond 
hyperelliptic curves and variations on that theme, descent calculations appear to 
be rather hopeless with the currently available technology. There are some first 
attempts at 2-descent on Jacobians of non-hyperelliptic curves of genus 3, however, 
so maybe the situation will change at some point in the not-too-distant future. 

3.3. An Extension. If we take n in Diagram (2) to be a multiple of a fixed 
number N, then we can restrict to a given coset X of iVJ(Q) (since this coset 
will be a union of cosets of nJ(Q)). Therefore the Mordell-Weil sieve computation 
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gives us a way of proving that the coset X does not meet t(C). In this case, there 
are no rational points on C that are mapped into X under l. 

Conjecture 16 can be extended to this situation. 

Conjecture 21. Let Q e J(Q). If (Q + NJ(Q)) H l(C) = 0, then there are 
n G N7j and S such that the Mordell- Weil sieve with these parameters proves this 
fact. 

So if we can find an iV that separates the rational points on C, i.e., such that the 
composition C(Q) A J(Q) -> J{Q)/NJ(Q) is injective, then we can effectively 
determine C(Q) if Conjecture 21 holds for C. The procedure simply considers 
each coset of NJ(Q) in turn. On the one hand, we run a search on C to find a 
rational point that maps into the coset under consideration; on the other hand, we 
run the Mordell- Weil sieve with the aim of proving that no such point exists. If 
Conjecture 21 holds, then one of these two computations has to produce a result. 
(In practice, we just run the Mordell- Weil sieve. As long as the intersection of the 
images of a and /3 is nonempty, we check the smallest representatives in J(Q) of 
the elements of the intersection whether they come from the curve.) 



4.1. The Idea. Chabauty [13] used this method to prove Mordell's Conjecture in 
the case that the rank r of J(Q) is smaller than the genus g of the curve. The idea 
is to consider the p-adic points J(Q P ) as a p-adic Lie group. The topological closure 
of J(Q) then is a Lie subgroup of dimension at most r. One then expects that this 
subgroup of positive codimension has only finitely many points of intersection with 
the analytic curve l(C(Q p )). This is what Chabauty proves. Later, the method 
was taken up by Coleman [15] who used it to deduce upper bounds on the number 
of rational points on the curve. The method can also be used to determine the set 
of rational points in certain cases, see [22, 25, 56] for early examples of this. The 
book [12] contains a description of the method when C has genus 2. 

We now describe the setting more concretely. Let p be a prime of good reduction 
for C (this assumption simplifies things, but is not strictly necessary). We denote 
by f2j(Q p ) the ^-dimensional Q p - vector space of regular 1-forms on J, and similarly 
for C. Then i induces an isomorphism of f2j(Q p ) and f^(Q p ) that is in fact 
independent of our choice of the embedding l. 

The p-adic logarithm on J is a continuous group homomorphism 



whose kernel consists of the elements of finite order. It induces a pairing 



4. Chabauty's Method 



log : J(Q P ) 



T J(Q P ) = Q)(Q P ) 




■P ■ 
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that becomes perfect if we replace J(Q P ) by J(Q P )° <8>z p Q p (where J(Q P )° is a 
sufficiently small neighborhood of the identity). Since 

rank J(Q) =r<g = dim Qp J#(Q P ) , 

there is a differential 

o ^ u p e ^(Q p ) = ^j(Q p ) 

that kills J(Q) C J(Q P ). 

Let Po ^ C(Q) be used as the base-point for the embedding l. Then the above 
implies that every point P G C(Q) must satisfy 

A(P) = / co p = 0. 

JPo 

The function A is a p-adic analytic function on C(Q P ). On each residue class 
mod p, it can be represented by an explicit converging power series. This makes 
it possible to bound the number of zeros of A on such a residue class. If we find 
the same number of rational points within the residue class, then we know that we 
have found them all. Some of the zeros of A may occur at transcendental points, 
however; in this case the upper bound on the number of points is not tight. We 
can use information from the Mordell-Weil sieve to rule out the spurious zeros; 
see [37] for some examples. 

4.2. Combination with the Mordell-Weil Sieve. We can also switch the roles 
of Chabauty's method and the Mordell-Weil sieve and use Chabauty's method in a 
helping function. We still need to assume that r < g. The idea is to use Chabauty's 
approach to find a separating number N. The key to this is the following result 
(see for example [50]). 

Theorem 22. Suppose that p is a prime of good reduction for C and that u p G 
(Q p ) is a differential that kills the Mordell-Weil group J(Q). We can assume 
that uj p is scaled so that it has a well-defined reduction u p ^ mod p. If u p does 
not vanish on C(F p ) and p > 2, then each residue class mod p on C contains at 
most one rational point. 

In this case, the number iV = #J(F P ) is separating, since we know that the 
map C(Q) — > C(F P ) is injective (this is the statement of the theorem), that 
l : C(F P ) J(F P ) is injective, and that J(Q)/NJ(Q) maps to J(¥ p ). 

Heuristic considerations indicate that the theorem applies for a set of primes p of 
positive density whenever r < g and J is simple. (If J splits, we can use one of 
the factors of J to do a similar computation.) 

The most accessible case is when g = 2, since then we have a good chance to 
determine J(Q). The 'Chabauty condition' r < g then reduces to r = 1. (When 
r = 0, the group J(Q) is finite, and we can easily find its intersection with t(C), so 
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this case is essentially trivial.) In this case, the differentials Cj p can be computed 
very easily, and we quickly find suitable primes p. The search for a suitable 
separating number N can be integrated with the Mordell-Weil sieve computation. 
This leads to a very efficient implementation that determines C(Q) quite fast for 
genus 2 curves C such that rank J(Q) = 1. See [9] for a discussion. 

Example 23. (See [53]) For the 46 436 small genus 2 curves with rational points 
and such that r = 1, we determined C(Q). This computation takes about 8-9 
hours on current hardware (as of 2009). 

5. Some Odds and Ends 

In this section, we collect some remarks on extensions and variants of the methods 
discussed above, and on some other approaches. 

5.1. Larger Rank. When r > g, we can still use the Mordell-Weil Sieve to show 
that we know all rational points up to very large height. For this, we increase 
n in the sieving procedure until we can prove that none of the remaining cosets 
of n J(Q) contains a point on C of height smaller than a given bound, except for 
the points we know. Once the bulk of the computation is done, we can increase 
the height bound without much extra cost. 

If the desired height bound is not so large, it may be more efficient to use lat- 
tice point enumeration. For this, we use the fact that the torsion-free quotient 
J(Q) / J(Q)tors — Z r is endowed with a positive definite quadratic form h, the 
canonical height. The height bound for P G C(Q) translates into a bound for 
h(t(P)); we can then enumerate all points in J(Q) (mod torsion) up to that 
height bound and check if they come from the curve. 

Example 24. (See [53]) Unless there are points of height > 10 100 , the largest 
point on a small genus 2 curve has height (i.e., maximum absolute value of the 
numerator and denominator of its x-coordinate) 209 040. 

For these applications, it is not enough to know generators of a finite-index sub- 
group of J(Q). We really need to know generators of the full Mordell-Weil group. 
The 'saturation' step from a finite-index subgroup to the full group requires the 
computation of canonical heights on J, and we need a bound for the difference 
between the canonical height and a suitable 'naive height'. So far, the necessary 
theory and algorithms only exist for g < 2 [21, 26, 46, 48]. Therefore, we are cur- 
rently limited to curves of genus 2. There is current work that aims at extending 
the tools so that they can also be used for higher-genus hyperelliptic curves, so we 
may soon be able to deal with a larger class of curves. 
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5.2. Integral Points. If we can determine the set of rational points on C, we 
obviously have also found the integral points. However, we can determine the set 
of integral points in some cases even when we are not able to find C(Q). For 
example, if C is hyperelliptic, we can compute bounds for integral points using 
Baker's method of 'Linear forms in logarithms'. The currently best results in this 
direction [10] lead to bound of a flavor like |x| < 10 10 . 

If we know generators of J(Q), we can use the Mordell-Weil sieve as explained 
in the previous subsection to prove that there are no unknown rational points 
below that bound. (The bound for h is something like 10 fc with k of the order 
of several hundred or a couple of thousand. This is within reach of our current 
implementation of the Mordell-Weil sieve method. See [10] or [9] for details.) It 
follows that we already know all the integral points on C. 

Example 25. (See [10]) The integral solutions to 



have x G {0, 1, 2, 3, 4, 5, 6, 7, 15, 19}. 

Since we need to know generators of the full Mordell-Weil group for this applica- 
tion, the remarks made at the end of the previous subsection also apply here. In 
particular, we are currently restricted to curves of genus 2. 

5.3. Genus Larger Than Two. We have seen that there are methods available 
that allow us to find out a lot about the rational points on a given curve of genus 2. 
When the genus is larger, a number of difficulties arise. 

If C is hyperelliptic (or perhaps of some other rather special form), it is still 
possible to do 2-descent on C and (to a certain extent) on J. For other curves, there 
is so far no feasible way to obtain provable upper bounds on the rank of J(Q). If 
we are willing to assume the Birch and Swinnerton-Dyer conjecture for J (together 
with some related conjectures on L-series) and the conductor of J is not too large, 
then we can use Tim Dokchitser's code [19] to compute (an upper bound for) the 
order of vanishing of L(s, J) at s = 1, which gives a conditional upper bound on r. 
We may then be able to find a set of generators of a finite-index subgroup of J(Q); 
this suffices to apply Chabauty's method or its combination with the Mordell-Weil 
sieve. 

Another difficulty is the missing explicit theory of heights. This prevents us from 
obtaining generators of the full Mordell-Weil group (or rather, it prevents us from 
showing that we actually have generators). This means that we cannot use the 
techniques described earlier in this section. 

Here are some examples that show what can still be done with curves of genus at 
least 3. 
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Example 26. (See [37]) In the course of solving x 2 + y 3 = z 7 in coprime integers, 
one has to determine the set of rational points on certain twists of the Klein 
Quartic. These are rather special non-hyperelliptic curves of genus 3. 2-Descent 
on J is possible here; Chabauty and Mordell-Weil sieve techniques are successful. 

Example 27. (See [52]) The curve .X"o yn (6) classifying 6-cycles under x t— > x 2 + c 
has genus 4. Assuming the Birch and Swinnerton-Dyer conjecture for its Jacobian, 
we can show that r = 3. We can then apply Chabauty' s method to determine 
X dyn (6)(Q). It follows that there are no 6-cycles consisting of rational numbers 
(under the assumptions made). 

Example 28. (See [43]) What are the arithmetic progressions in coprime integers 
that have the form (a 2 , b 2 , c 2 , d 5 )7 This question leads to a number of hyperelliptic 
curves of genus 4; every solution to the original question gives rise to a rational 
point on one of these curves. There are three essentially different curves. For two 
of them, the 2-Selmer set turns out to be empty. For the last one, a 2-descent on 
its Jacobian is possible and shows that the rank is 2. Chabauty, combined with a 
little Mordell-Weil sieve information, then succeeds in showing that there are no 
unexpected points. This finally proves that the only arithmetic progression of the 
desired form is the trivial one, (1, 1, 1, 1). 

5.4. The Method of Dem'yanenko-Manin. The method of Dem'yanenko- 
Manin is an alternative method that can be used to determine C(Q) in some 
cases. When it applies, it gives an effective bound on the height of the ratio- 
nal points on C (and not just on their number, as is the case with Chabauty's 
method). 

The requirement here is that we have m independent morphisms C — > A, where A 
is some abelian variety and m > rank A(Q). The idea is that the images of points 
on C under these independent morphisms want to be independent in -A(Q), but 
there is not enough room for them to be independent. This leads to a bound on 
the height of the points. 

If one looks at more or less 'random' curves C that have two independent maps to 
an elliptic curve E, say, then the two images on E of a rational point on C usually 
are independent in E(Q), invalidating the assumption. So the method appears to 
be of fairly limited applicability. 

There are cases, however, when the method can be used with profit. In [18], it is 
applied to certain twists of the Fermat quartic that have two independent maps to 
an elliptic curve. However, as Serre comments in [ 12], it is hard to find nontrivial 
examples. See [27] for a more recent variation on this theme. 

In [32], Manin makes use of the growing number of degeneracy maps X (p n ) — > 
X (p) in order to show that for any given prime p, the power of p that divides 
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the order of a rational torsion point on an elliptic curve over Q (or over any fixed 
number field) is bounded. 

5.5. Covering Collections and Elliptic Curve Chabauty. The Descent The- 
orem 11 tells us that we obtain all rational points on a given curve C from the 
rational points on the various twists of a covering of C. If we can find this 
collection of twists explicitly (this is sometimes called a covering collection for C), 
then we can attempt to determine their sets of rational points instead of directly 
trying to find C(Q). This can be helpful when the rank of J(Q) is too large to 
apply Chabauty's method on C, since the ranks associated to the curves D% may 
well be sufficiently small. 

The downside of this approach is that the covering curves have larger genus than C, 
and so the methods described here are usually not applicable. In some cases, the 
curves D% map to other curves of low genus. If we can find their rational points, 
we can determine those onD^. A very useful variant arises when the target is an 
elliptic curve E; the map may be defined over some number field K. The images 
of rational points on then satisfy some additional constraints. This can be used 
to find these images by a variant of Chabauty's method (applied to the restriction 
of scalars of E from K down to Q) when the rank of E(K) is less than the degree 
of K. This is known as Elliptic curve Chabauty] see [2, 3, 4, 5, 56] for details and 
examples. 

6. Concluding Remarks 

The last ten or fifteen years have seen tremendous progress in our ability to deter- 
mine the set of rational points on curves of higher genus, in particular on curves 
of genus 2. Given a curve C of genus 2 over Q, we can now do the following. 

• Search for rational points on C. 

• Check if C has points everywhere locally. 

• Perform a 2-descent on C, thus possibly showing that C(Q) is empty. 

• Perform a 2-descent on J, the Jacobian of C, thus obtaining an upper 
bound on r = rank J(Q). 

• Search for rational points on J, thus obtaining a lower bound on r. 

• Find generators of a finite-index subgroup of J(Q) if both bounds agree. 

• Compute canonical heights on J. 

• Find generators of J(Q) if generators of a finite-index subgroup are known, 
assuming that the bound for the difference between naive and canonical 
height is not too large. 

• If r < 1, determine C(Q) using a combination of the Mordell-Weil sieve and 
Chabauty's method. (Termination of this is conditional on Conjecture 21, 
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but if the computation terminates, which is always the case in practice, 
the result is provably correct.) 

• If r > 2 and J(Q) is known, find all rational points on C up to very large 
height. 

• If J(Q) is known, find all integral points on C. 

From a practical point of view, what is missing to make this really satisfying is 
a way of determining a separating N when r > 2 (without previous knowledge 
what C(Q) is). If a separating N can be found, then the same approach as used 
when combining the Mordell-Weil sieve with Chabauty's method will enable us to 
determine C(Q). 

From a theoretical point of view, we would like to have a proof of Conjecture 21, 
since this will guarantee that our procedure terminates. (For practical computa- 
tions, we don't really care about a proof as long as the computation terminates; 
the result will be correct in any case.) The other theoretical gap is that it is still 
open whether the rank r can be found effectively. This is related to the finiteness 
of I1I(J/Q), which is only known in very special cases. 

For curves of higher genus than 2, some of the items on the list above can still be 
done (in particular when C is hyperelliptic), but we soon reach a point where things 
become infeasible. However, I believe that this is only a matter of complexity and 
not of principle: given sufficient resources, we should be able to perform the same 
kind of computation also with more general curves. (Of course, some theoretical 
work still has to be done for this, like an extension of the explicit theory of heights 
that we have at our disposal when the genus is 2.) 

Based on what we can actually do, on various heuristic considerations, and on 
fairly extensive experimental data, I am convinced that it is actually possible 
(in principle) to determine the set C(Q) algorithmically, when C is a curve of 
genus > 2. A complete proof of this statement is likely to be quite far away still, 
but the progress that has been made on the practical side in recent years is very 
encouraging. 
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